zeek/doc/scripting/connection_record_02.bro
Jon Siwek 31866f8f59 Change dns.log to include only standard DNS queries.
The scope of dns.log is now only standard queries (OPCODE == 0).  Other
kinds of queries (e.g. inverse query) were not handled correctly and
could interfere with the state tracking of the default DNS scripts.
2014-01-28 13:56:22 -06:00

7 lines
123 B
Text

@load base/protocols/conn
@load base/protocols/http
event connection_state_remove(c: connection)
{
print c;
}